[Cryptography] asymmetric attacks on crypto-protocols - the rough consensus attack

[Ron Garret]

On Aug 6, 2015, at 9:46 AM, Ray Dillinger <bear at sonic.net> wrote:

> Design it carefully.  Then build it.  Be sure it's working as
> designed.  Then if and ONLY if you can do it without compromising
> the design, see if you can actually comply with those standards
> without breaking its security.

In keeping with this advice, I am pleased to announce that my super-simple (<1000 LOC + TweetNaCl) PGP replacement, SC4, now has a command-line version written in Python.  If crypto in the browser made you queasy, this is for you.

https://github.com/Spark-Innovations/SC4

NOTE: This is an ALPHA release.  It has undergone only very cursory testing (I would really appreciate some help with that, actually).  The web version of SC4 has been audited, but the Python version has not (though it was mostly ported directly from the Javascript implementation, so it should not have any gaping holes).

Feedback of all sorts very much appreciated.

rg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20150806/9078b75d/attachment.sig>